This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File:                     3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier:          1Q8cajH/UYDzsBs2maw90FS95epk3iFlV1axpw+bTO4=
Subject key identifier:   7B:53:2A:B9:04:6B:E9:C7:B0:F4:8E:70:DF:D9:68:66:F4:7C:B1:48
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer:       /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial:       019C438FA5C990975431AF3CE66C201044ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number:          180E
Signing time:             Mon 09 Feb 2026 18:00:13 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:13 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:13 +0000
Files and hashes:         1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: 8AO6zv7gRrG5jI2iUzCYijxXvBbfF/tUf0jb2WT8UZM=)
                          2: eiZ3dRoJQOY5In2On20-nf-q73k.roa (hash: GE2likVbzstV6xbMDw5q0Xw8FdnZheeQhcKCOGkCp1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:a5:c9:90:97:54:31:af:3c:e6:6c:20:10:44:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
        Validity
            Not Before: Feb  9 18:00:13 2026 GMT
            Not After : Feb 10 18:00:13 2026 GMT
        Subject: CN=7b532ab9046be9c7b0f48e70dfd96866f47cb148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b9:c5:c8:72:c0:fc:31:e5:da:21:7f:b7:ae:
                    cb:5c:65:a3:25:c9:75:c3:a5:df:38:26:81:55:1b:
                    65:3b:61:03:ce:e1:cb:ef:5b:80:d3:f2:cf:ae:56:
                    5a:58:ff:cd:b4:3c:40:05:f2:9e:0c:2e:64:4f:fb:
                    cb:bb:e1:f9:0d:d4:a4:8a:0b:8e:1c:ef:76:00:ae:
                    2a:8c:d4:3b:f2:23:84:9b:73:d3:e3:8f:dd:f9:d9:
                    ff:18:7f:cf:2e:bc:38:e3:9d:7e:e7:84:44:7d:20:
                    39:09:cd:f9:1a:ba:d2:84:5d:b4:6e:5e:03:1f:ea:
                    72:3a:21:b3:2c:cb:eb:4b:d1:f4:f7:94:1f:67:87:
                    91:47:42:f5:07:3a:9c:9b:98:a0:cc:49:51:2e:b8:
                    ea:54:e7:30:ca:48:2b:11:04:e7:a5:90:23:b6:58:
                    aa:3e:db:ff:d5:58:2b:62:b4:7a:2b:50:c0:bd:c3:
                    fe:4d:18:8a:cf:85:69:1d:ae:28:31:73:d9:3b:1b:
                    4b:44:70:63:d6:87:ce:c3:9f:9c:0a:cf:81:5d:42:
                    54:75:5e:1b:75:0b:0d:41:e8:bf:17:2e:e1:1b:f3:
                    3e:7f:cb:6e:ec:d4:2c:7e:52:22:f5:71:37:b5:6f:
                    16:46:71:50:5b:4c:52:fa:e1:ee:e1:55:d6:9b:ee:
                    e3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:53:2A:B9:04:6B:E9:C7:B0:F4:8E:70:DF:D9:68:66:F4:7C:B1:48
            X509v3 Authority Key Identifier:
                keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:df:5d:97:ae:c8:9d:24:e7:8e:63:df:13:21:33:e8:f3:0c:
         6b:d7:bb:34:04:fe:e1:50:7d:7a:16:85:26:ba:e8:4f:11:69:
         9f:85:dc:07:13:0d:60:2d:88:86:2f:6c:82:9a:f8:30:ab:c3:
         64:3e:bc:b5:1e:04:41:68:b0:cd:9a:be:5c:95:ce:47:d0:1e:
         e1:09:56:55:ad:ea:86:28:4c:08:bd:f1:c4:99:3b:96:14:bb:
         64:39:a1:fd:c3:f0:d5:69:c7:a7:c6:81:ee:e8:d3:ca:75:4e:
         01:d1:45:b1:a2:d9:cb:1f:b0:20:6a:39:0f:8f:aa:a8:3b:bd:
         ab:fe:0b:48:e7:4b:68:01:02:f8:06:0a:ef:cd:dc:cd:67:31:
         1c:c9:e8:7d:78:86:c1:53:73:62:e0:61:d3:b7:92:88:c1:24:
         60:f2:2b:30:36:7f:48:4b:6e:c7:e5:6f:90:07:6e:e8:fc:38:
         92:7a:0f:4b:9f:f4:76:86:e6:a8:40:f7:0e:8b:36:bc:91:8d:
         12:f6:39:fe:6c:78:7d:34:75:11:f4:44:60:f7:2f:d4:43:a4:
         08:e5:2c:63:fc:ec:a9:79:d4:de:99:60:ce:02:aa:03:0d:39:
         94:59:29:95:31:06:f2:5c:ca:a9:b8:e7:5a:11:6e:9d:0d:25:
         86:2a:13:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:04 2026 by rpki-client